"Event Log" missing in Services

  • Thread starter Thread starter Jimmy
  • Start date Start date
J

Jimmy

Hello,

My Event Viewer isn't working, the problem is identical to an old
thread on this newsgroup, i am pasting that conversation here:

=========================================================

Anonymous 05-31-2005 at 06:01:03 PM

Archived from groups: microsoft.public.windowsxp.perform_maintain


The normal Event Log service is missing.


In other words when I look at Services there is no Event Log
service

I discovered this when I went to view the event log.

The Event Viewer will give an "Interface Unknown" when clicking on
Application, Security, or System

Does anyone know how to fix this?

=========================================================

Archived from groups: microsoft.public.windowsxp.perform_maintain


Check for the existence of this key. If not found create a *.reg file
from
another machine and import.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]

==========================================================

Archived from groups: microsoft.public.windowsxp.perform_maintain


Brilliant - that worked

Exported EventLog Key from laptop
Imported to Broken Machine

Everything works.

Deeply appreciated.

==========================================================

10-29-2009.........
Back to present.... i checked my registry and there is an EventLog
entry in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
\EventLog. The first line in ACEEventLog,Internet
Explorer,Sercurity,SLEvtLog,System are identical, Name=ab(Default)
Data=(value not set). Under Application it is Name=ab(Default)
Data=mnmsrvc.

Also, how do i export EventLog Key from another system? I know how to
import a reg file. Any advice/help appreciated. Thanks Jimmy
 
Hello,

My Event Viewer isn't working, the problem is identical to an old
thread on this newsgroup, i am pasting that conversation here:

=========================================================

Anonymous   05-31-2005 at 06:01:03 PM

Archived from groups: microsoft.public.windowsxp.perform_maintain

The normal Event Log service is missing.

In other words when I look at Services there is no Event Log
service

I discovered this when I went to view the event log.

The Event Viewer will give an "Interface Unknown" when clicking on
Application, Security, or System

Does anyone know how to fix this?

=========================================================

Archived from groups: microsoft.public.windowsxp.perform_maintain

Check for the existence of this key. If not found create a *.reg file
from
another machine and import.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]

==========================================================

Archived from groups: microsoft.public.windowsxp.perform_maintain

Brilliant - that worked

Exported EventLog Key from laptop
Imported to Broken Machine

Everything works.

Deeply appreciated.

==========================================================

10-29-2009.........
Back to present.... i checked my registry and there is an EventLog
entry in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
\EventLog. The first line in ACEEventLog,Internet
Explorer,Sercurity,SLEvtLog,System are identical, Name=ab(Default)
Data=(value not set). Under Application it is Name=ab(Default)
Data=mnmsrvc.

Also, how do i export EventLog Key from another system? I know how to
import a reg file. Any advice/help appreciated. Thanks Jimmy

I found how to export a registry key online. I am running XP Home
Edition, will any machine with XP Home Edition work as a source for
the EventLog key. Thanks in advance, jimmy
 
Jimmy said:
Hello,

My Event Viewer isn't working, the problem is identical to an old
thread on this newsgroup, i am pasting that conversation here:

=========================================================

Anonymous 05-31-2005 at 06:01:03 PM

Archived from groups: microsoft.public.windowsxp.perform_maintain

The normal Event Log service is missing.

In other words when I look at Services there is no Event Log
service

I discovered this when I went to view the event log.

The Event Viewer will give an "Interface Unknown" when clicking on
Application, Security, or System

Does anyone know how to fix this?

=========================================================

Archived from groups: microsoft.public.windowsxp.perform_maintain

Check for the existence of this key. If not found create a *.reg file
from
another machine and import.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]

==========================================================

Archived from groups: microsoft.public.windowsxp.perform_maintain

Brilliant - that worked

Exported EventLog Key from laptop
Imported to Broken Machine

Everything works.

Deeply appreciated.

==========================================================

10-29-2009.........
Back to present.... i checked my registry and there is an EventLog
entry in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
\EventLog. The first line in ACEEventLog,Internet
Explorer,Sercurity,SLEvtLog,System are identical, Name=ab(Default)
Data=(value not set). Under Application it is Name=ab(Default)
Data=mnmsrvc.

Also, how do i export EventLog Key from another system? I know how to
import a reg file. Any advice/help appreciated. Thanks Jimmy

I found how to export a registry key online. I am running XP Home
Edition, will any machine with XP Home Edition work as a source for
the EventLog key. Thanks in advance, jimmy
.

Hi Jimmy,
Yes, any XP Home or XP pro can be the source for importing the Reg to merge
it to your registry but you need to bear in mind that you will need to
tinker/change the name of the Computer in that reg!
"ComputerName"="Here" please enter the name here"My Computer name"
I copied the Reg entry for you to use but you need to enter your computer
name then save it as Eventlog.reg on your desktop then right click it and
select mereg to merge to your registry.

======== Copy and paste to your Notepad the code below ======
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog]
"Description"="Enables event log messages issued by Windows-based programs
and components to be viewed in Event Viewer. This service cannot be stopped."
"DisplayName"="Event Log"
"ErrorControl"=dword:00000001
"Group"="Event log"
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
00,65,00,72,00,76,00,69,00,63,00,65,00,73,00,2e,00,65,00,78,00,65,00,00,00
"ObjectName"="LocalSystem"
"PlugPlayServiceType"=dword:00000003
"Start"=dword:00000002
"Type"=dword:00000020
"ComputerName"=""

==== End of code =======================

HTH, please let us know your progress
nass
 
Jimmy said:
Hello,
My Event Viewer isn't working, the problem is identical to an old
thread on this newsgroup, i am pasting that conversation here:
=========================================================
Anonymous   05-31-2005 at 06:01:03 PM
Archived from groups: microsoft.public.windowsxp.perform_maintain
The normal Event Log service is missing.
In other words when I look at Services there is no Event Log
service
I discovered this when I went to view the event log.
The Event Viewer will give an "Interface Unknown" when clicking on
Application, Security, or System
Does anyone know how to fix this?
=========================================================
Archived from groups: microsoft.public.windowsxp.perform_maintain
Check for the existence of this key. If not found create a *.reg file
from
another machine and import.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
--
Regards,
Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
==========================================================
Archived from groups: microsoft.public.windowsxp.perform_maintain
Brilliant - that worked
Exported EventLog Key from laptop
Imported to Broken Machine
Everything works.
Deeply appreciated.
==========================================================
10-29-2009.........
Back to present.... i checked my registry and there is an EventLog
entry in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
\EventLog. The first line in ACEEventLog,Internet
Explorer,Sercurity,SLEvtLog,System are identical, Name=ab(Default)
Data=(value not set). Under Application it is Name=ab(Default)
Data=mnmsrvc.
Also, how do i export EventLog Key from another system? I know how to
import a reg file. Any advice/help appreciated. Thanks Jimmy
I found how to export a registry key online. I am running XP Home
Edition, will any machine with XP Home Edition work as a source for
the EventLog key. Thanks in advance, jimmy
.

Hi Jimmy,
Yes, any XP Home or XP pro can be the source for importing the Reg to merge
it to your registry but you need to bear in mind that you will need to
tinker/change the name of the Computer in that reg!
"ComputerName"="Here"  please enter  the name here"My Computer name"
I copied the Reg entry for you to use but you need to enter your computer
name then save it as Eventlog.reg on your desktop then right click it and
select mereg to merge to your registry.

======== Copy and paste to your Notepad the code below ======
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog]
"Description"="Enables event log messages issued by Windows-based programs
and components to be viewed in Event Viewer. This service cannot be stopped."
"DisplayName"="Event Log"
"ErrorControl"=dword:00000001
"Group"="Event log"
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f­,00,\
  74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,­\
  00,65,00,72,00,76,00,69,00,63,00,65,00,73,00,2e,00,65,00,78,00,65,00,00,00
"ObjectName"="LocalSystem"
"PlugPlayServiceType"=dword:00000003
"Start"=dword:00000002
"Type"=dword:00000020
"ComputerName"=""

==== End of code =======================

HTH, please let us know your progress
nass
---http://www.nasstec.co.uk- Hide quoted text -

- Show quoted text -

Hi nass,

I inserted my computer name and merged the file into the registry.
Rebooted, went to Services. EVENTLOG was there and i got an error upon
trying to start.COULD NOT START THE EVENT LOG SERVICE ON LOCAL
COMPUTER: ERROR 3: THE SYSTEM CANNOT FIND THE PATH SPECIFIED. Double
clicked Event Log entry and the PATH TO EXECUTABLE field was blank.
Selecting EVENTLOG in REGEDIT, there was no ImagePath in the data
field. I created an ImagePath and inserted "%SystemRoot%
\System32\svchost.exe -k LocalServiceNetworkRestricted" (got that path
from another posting). Still would not start, this time ERROR 2: THE
SYSTEM CANNOT FIND THE FILE SPECIFIED. I then changed the ImagePath to
"%SystemRoot%\System32\svchost.exe -k netsvcs" and rebooted with the
same results as the first ImagePath, ERROR 2. Checked System32
directory, svchost.exe is there. Any ideas? Thanks for the help thus
far, jimmy
 
Event Log Service (REG file):http://windowsxp.mvps.org/eventlog.htm

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Desktop Experience]
---------------------------------------------------------------------------­---
Supporting Windows® 7, Vista & XPhttp://www.winhelponline.com
---------------------------------------------------------------------------­---




My Event Viewer isn't working, the problem is identical to an old
thread on this newsgroup, i am pasting that conversation here:

Anonymous   05-31-2005 at 06:01:03 PM
Archived from groups: microsoft.public.windowsxp.perform_maintain
The normal Event Log service is missing.
In other words when I look at Services there is no Event Log
service
I discovered this when I went to view the event log.
The Event Viewer will give an "Interface Unknown" when clicking on
Application, Security, or System
Does anyone know how to fix this?

Archived from groups: microsoft.public.windowsxp.perform_maintain
Check for the existence of this key. If not found create a *.reg file
from
another machine and import.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
==========================================================

Archived from groups: microsoft.public.windowsxp.perform_maintain
Brilliant - that worked
Exported EventLog Key from laptop
Imported to Broken Machine
Everything works.
Deeply appreciated.

10-29-2009.........
Back to present.... i checked my registry and there is an EventLog
entry in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
\EventLog. The first line in ACEEventLog,Internet
Explorer,Sercurity,SLEvtLog,System are identical, Name=ab(Default)
Data=(value not set). Under Application it is Name=ab(Default)
Data=mnmsrvc.
Also, how do i export EventLog Key from another system? I know how to
import a reg file. Any advice/help appreciated. Thanks Jimmy- Hide quoted text -

- Show quoted text -

Hi again nass -

Got everything back, Event Viewer,Sercurity Center,Firewall, worked
like a charm, just like the other guy with this problem, it cleared my
Security Center & Firewall panels which were also not starting. I
found two hypens "-" in the ImagePath data that aren't in your copy,
don't ask me how they got there, i have no clue. So i restored to a
good checkpoint and imported the file, rebooted, presto, everything
works, thanks so much for the help. Thanks for the help also Ramesh,
appreciated. I am so happy, i think i will dance a bit, goodnite all,
jimmy
 
Back
Top